$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json) Hash identifier: Iv8FP20IkyTepOJoj6Wi+chMD2T+PGE5NgT9EMkcBlo= Subject key identifier: 70:89:AE:14:FC:4D:6B:2D:1E:33:BF:AE:C0:BE:60:72:AA:38:B0:73 Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft Manifest number: 07E9 Signing time: Mon 08 Sep 2025 21:12:21 +0000 Manifest this update: Mon 08 Sep 2025 21:12:20 +0000 Manifest next update: Mon 15 Sep 2025 21:12:20 +0000 Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: aeFProqfD9poSpsR2M4Ilauef7G/nbS2MjEJMeYI2d4=) 2: D19E7784AAF811EE8D8CCD25C4F9AE02.roa (hash: +XIvNmYB/5EgcsxvZK5ch01j/uNHHViQProaEC6+kLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 21:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Sep 8 21:12:20 2025 GMT Not After : Sep 15 21:12:20 2025 GMT Subject: CN=68bf46b5-2734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:8e:2c:d5:21:40:68:9b:af:4b:01:ee:24: 35:fd:c7:93:57:f2:90:1a:29:4b:0f:c8:56:6e:3c: e6:5f:fb:b9:e8:ed:fa:a4:f0:43:2b:62:a5:1e:60: 5a:e0:2a:36:28:0f:43:5d:07:50:ca:85:f5:3a:f4: 85:1b:59:ff:f8:53:87:a5:11:46:78:64:bb:e2:0d: 4c:52:5c:79:aa:c9:a7:60:b8:f3:f9:f8:e5:ff:bc: a5:a1:23:27:3d:f3:5c:89:2d:9e:68:1c:cf:ac:6e: 72:d8:c7:8a:1a:4c:81:ba:b1:b3:74:21:bd:5a:79: 46:bc:58:f1:6a:40:b2:52:85:aa:52:f2:c4:de:25: 4e:dc:3d:17:f1:57:20:91:4a:93:8b:ae:50:dd:53: d9:78:7f:66:a0:e7:5a:e2:a6:88:39:78:90:80:f3: 9e:0e:33:0c:58:3f:c9:f4:7b:ef:fd:61:ac:99:3b: c6:fa:ed:d8:b7:63:0d:3a:76:fa:68:db:bc:df:34: 1c:a3:f8:43:16:08:e9:63:61:ff:c9:c5:58:95:5e: a9:f6:8a:40:8f:e5:31:3d:99:b3:0a:fb:cd:fc:af: cd:d3:b0:98:8a:57:b0:96:56:ad:8a:30:2b:6d:80: e4:07:51:f9:54:d0:cb:6e:4a:93:de:f5:a4:3c:5b: e9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:89:AE:14:FC:4D:6B:2D:1E:33:BF:AE:C0:BE:60:72:AA:38:B0:73 X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:bd:cc:82:a1:d6:e1:17:8b:49:38:ca:dd:50:b3:9d:d8:af: f1:06:03:62:79:e1:53:dc:90:96:88:6f:fc:b3:e6:5c:30:82: 1b:3a:e9:92:71:6d:67:93:0d:e5:d3:bf:b8:b1:eb:9f:d7:ce: 2f:e0:62:66:e5:3d:03:71:60:cc:64:60:04:8c:bb:9b:9f:d5: 30:26:4b:a4:f1:f9:ac:9b:39:ba:28:95:92:6c:de:17:ad:d7: 92:57:86:8d:22:fd:76:76:ea:13:52:51:8b:39:13:97:1e:d8: d2:d1:ba:18:e8:ed:de:ee:7f:f6:5c:62:a5:28:72:fa:50:74: 37:62:e4:68:53:8c:9a:37:3b:2e:ed:f0:25:c1:69:17:b7:95: ab:50:cc:cd:88:77:6a:e5:fd:d3:d6:a7:1b:b9:55:f0:30:d3: ee:4a:6d:74:eb:1b:c5:9d:d1:fe:29:0a:7d:8e:a3:45:2b:71: 21:0e:9f:1a:ca:21:17:e3:40:9b:51:9b:40:f3:cf:d3:2c:b1: f1:ea:1b:cc:ee:50:79:80:ec:cd:51:f6:c6:76:be:09:d8:2c: b2:f5:62:af:70:3c:0e:50:24:c4:e2:da:af:e2:80:07:21:3c: dc:4a:33:cf:e3:a2:78:5d:e1:8f:8b:b7:31:d6:6a:8c:47:58: 58:fc:b0:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjUwOTA4MjExMjIwWhcNMjUwOTE1MjExMjIwWjAYMRYwFAYD VQQDEw02OGJmNDZiNS0yNzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KyOLNUhQGibr0sB7iQ1/ceTV/KQGilLD8hWbjzmX/u56O36pPBDK2KlHmBa 4Co2KA9DXQdQyoX1OvSFG1n/+FOHpRFGeGS74g1MUlx5qsmnYLjz+fjl/7yloSMn PfNciS2eaBzPrG5y2MeKGkyBurGzdCG9WnlGvFjxakCyUoWqUvLE3iVO3D0X8Vcg kUqTi65Q3VPZeH9moOda4qaIOXiQgPOeDjMMWD/J9Hvv/WGsmTvG+u3Yt2MNOnb6 aNu83zQco/hDFgjpY2H/ycVYlV6p9opAj+UxPZmzCvvN/K/N07CYilewllatijAr bYDkB1H5VNDLbkqT3vWkPFvppQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCJrhT8 TWstHjO/rsC+YHKqOLBzMB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5l X3FLLTNXZXZzYmdqaU9YckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOvcyCodbhF4tJOMrdULOd2K/xBgNieeFT3JCWiG/8s+ZcMIIbOumS cW1nkw3l07+4seuf184v4GJm5T0DcWDMZGAEjLubn9UwJkuk8fmsmzm6KJWSbN4X rdeSV4aNIv12duoTUlGLOROXHtjS0boY6O3e7n/2XGKlKHL6UHQ3YuRoU4yaNzsu 7fAlwWkXt5WrUMzNiHdq5f3T1qcbuVXwMNPuSm106xvFndH+KQp9jqNFK3EhDp8a yiEX40CbUZtA88/TLLHx6hvM7lB5gOzNUfbGdr4J2Cyy9WKvcDwOUCTE4tqv4oAH ITzcSjPP46J4XeGPi7cx1mqMR1hY/LDE -----END CERTIFICATE-----Generated at Wed Sep 10 10:02:48 2025 by rpki-client